CVEvulnerability
CVE-2012-4731
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.
Affected configurations
• bestpractical rtfm (<= 2.4.3)
• bestpractical rtfm 2.2.0
• bestpractical rtfm 2.2.1
• bestpractical rtfm 2.2.2
• bestpractical rtfm 2.4.0
• bestpractical rtfm 2.4.1
• bestpractical rtfm 2.4.2
Related
Weakness · not in database (1)
References
- http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html lists.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html lists.bestpractical.com
- http://secunia.com/advisories/51062 Vendor Advisory
- http://secunia.com/advisories/51111 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2568 www.debian.org
- http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000212.html lists.bestpractical.com
- http://lists.bestpractical.com/pipermail/rt-announce/2012-October/000215.html lists.bestpractical.com
- http://secunia.com/advisories/51062 Vendor Advisory
- http://secunia.com/advisories/51111 Vendor Advisory
- http://www.debian.org/security/2012/dsa-2568 www.debian.org